Page 13 of 118 results (0.002 seconds)

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. GraphicsMagick 1.3.26 tiene un problema de denegación de servicio en ReadXBMImage() en un caso coders/xbm.c "Read hex image data" version==10 que resultará en que no retorna el lector. Esto podría hacer que se consuman grandes cantidades de recursos de memoria y CPU aunque el archivo manipulado no lo pida. • http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e http://openwall.com/lists/oss-security/2017/08/31/1 http://www.securityfocus.com/bid/100575 https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html https://usn.ubuntu.com/4222-1 https://www.debian.org/security/2018/dsa-4321 • CWE-834: Excessive Iteration •

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 1

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. GraphicsMagick 1.3.26 tiene un problema de denegación de servicio en ReadXBMImage() en un caso coders/xbm.c "Read hex image data" version!=10 que resultará en que no retorna el lector. Esto podría hacer que se consuman grandes cantidades de recursos de memoria y CPU aunque el archivo manipulado no lo pida. • http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e http://openwall.com/lists/oss-security/2017/08/31/2 http://www.securityfocus.com/bid/100574 https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html https://usn.ubuntu.com/4222-1 https://www.debian.org/security/2018/dsa-4321 • CWE-834: Excessive Iteration •

CVSS: 6.5EPSS: 1%CPEs: 3EXPL: 0

There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack. Existe una liberación no válida en la función MagickFree en magick/memory.c en GraphicsMagick 1.3.26 que podría acabar en un ataque de denegación de servicio remoto. • http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a http://openwall.com/lists/oss-security/2017/08/29/4 http://www.securityfocus.com/bid/100518 https://bugs.debian.org/878511 https://bugzilla.redhat.com/show_bug.cgi?id=1484196 https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack. Existen muchas fugas de memoria en la función GMCommand en magick/command.c en GraphicsMagick 1.3.26 que podría acabar en un ataque de denegación de servicio remoto. • http://www.securityfocus.com/bid/100513 https://bugzilla.redhat.com/show_bug.cgi?id=1484192 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. En GraphicsMagick 1.3.26 se ha encontrado una vulnerabilidad de fuga de memoria en la función ReadMATImage en coders/mat.c. • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ https://sourceforge.net/p/graphicsmagick/bugs/433 • CWE-772: Missing Release of Resource after Effective Lifetime •